Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/6f03f16a-f39d-35fa-a9bd-35bf88d0eca7.roa
File:                     6f03f16a-f39d-35fa-a9bd-35bf88d0eca7.roa (raw, json)
Hash identifier:          q1Uj6ecDonn9botuI4xNNzKcwUP/FLVzq0QoHKQpRWQ=
Subject key identifier:   BF:B1:DD:05:E2:8F:BB:E4:7B:12:80:8E:32:79:6E:F5:E5:06:83:8B
Certificate issuer:       /CN=400c5da8-08ab-40ed-9e23-dff413fb2d52
Certificate serial:       010D0C9F4328584EFF77778B81952BFADE8B7F40
Authority key identifier: C1:64:92:0E:E9:7C:FC:C2:87:A4:0A:82:1D:BF:EA:21:97:33:7F:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/6f03f16a-f39d-35fa-a9bd-35bf88d0eca7.roa
Signing time:             Sat 29 Aug 2026 13:00:12 +0000
ROA not before:           Sat 29 Aug 2026 13:00:12 +0000
ROA not after:            Fri 27 Nov 2026 14:00:12 +0000
asID:                     23158
IP address blocks:        162.0.240.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/400c5da8-08ab-40ed-9e23-dff413fb2d52.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/400c5da8-08ab-40ed-9e23-dff413fb2d52.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ff:77:77:8b:81:95:2b:fa:de:8b:7f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=400c5da8-08ab-40ed-9e23-dff413fb2d52
        Validity
            Not Before: Aug 29 13:00:12 2026 GMT
            Not After : Nov 27 14:00:12 2026 GMT
        Subject: CN=ee60cb1a-29b7-4d4c-8272-99326a930499
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:0d:60:54:e1:41:4e:93:14:af:0e:18:34:3c:
                    a3:af:e1:7c:ae:17:63:a4:cc:56:dd:03:90:c4:66:
                    3a:fd:4f:86:17:29:ef:4d:e2:fb:01:40:39:5f:93:
                    c3:b6:ab:da:f2:f3:25:18:07:af:f2:80:de:c4:26:
                    bd:f9:15:00:40:45:95:3d:61:1a:cd:fb:2b:d4:f7:
                    32:90:5c:f4:87:58:01:85:81:9c:fe:37:3d:a4:f7:
                    86:b0:16:e9:d4:38:b4:66:7d:48:eb:6b:fd:cd:52:
                    d0:41:c6:4c:16:45:20:7c:09:3b:c3:56:c3:f9:bc:
                    a5:42:2f:6f:16:aa:bf:c0:65:21:b9:a3:e2:67:e7:
                    55:75:9b:f5:f3:e5:62:35:69:41:51:53:fa:64:b5:
                    33:3f:eb:74:86:75:bd:8e:b3:71:b1:1c:10:47:91:
                    de:f9:a8:04:89:a0:02:32:65:e9:e1:78:8f:17:34:
                    8d:f5:d7:5b:ef:6d:f8:f8:8e:c1:98:85:b4:f9:de:
                    5e:76:7b:ad:a9:9a:ef:ef:ac:ec:20:00:93:b1:ee:
                    f6:e8:af:fc:f2:b3:37:09:7e:51:09:94:6d:1e:24:
                    3e:5f:7d:8f:20:e3:79:32:f4:1a:09:e8:57:f5:eb:
                    0d:a0:eb:df:86:c2:89:22:d5:3a:a8:2a:a4:1f:da:
                    39:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:B1:DD:05:E2:8F:BB:E4:7B:12:80:8E:32:79:6E:F5:E5:06:83:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/6f03f16a-f39d-35fa-a9bd-35bf88d0eca7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/400c5da8-08ab-40ed-9e23-dff413fb2d52.crl

            X509v3 Authority Key Identifier:
                keyid:C1:64:92:0E:E9:7C:FC:C2:87:A4:0A:82:1D:BF:EA:21:97:33:7F:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.0.240.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:62:8f:f5:ba:fc:dc:73:f3:74:fb:7b:87:89:63:59:46:93:
         8a:33:79:f3:93:13:47:a2:ce:b1:b1:7b:ae:4c:51:2b:ef:b4:
         3b:3c:bb:8e:d1:4b:81:cf:28:3a:4f:e8:1d:d8:50:a8:bf:56:
         03:d3:15:01:b6:e0:78:18:d4:c8:db:a4:eb:87:55:3f:b7:88:
         e9:23:64:f3:02:41:98:cf:ce:ad:5d:55:14:b6:d2:15:19:0d:
         c3:a3:f0:6c:76:24:8d:1f:99:4a:99:63:40:10:17:4c:d1:df:
         f3:b5:61:d8:74:72:0d:7b:b1:fa:67:e1:d2:1d:42:d1:9c:8a:
         ac:65:3d:ba:17:4d:65:a1:26:70:b0:99:1e:0f:3e:02:48:2f:
         6b:2c:0d:f7:1b:0e:4a:39:ee:b1:d1:d7:41:9d:ce:dc:a6:e8:
         bc:78:66:b9:e7:50:6a:9a:a4:f7:57:34:12:65:54:d8:f6:39:
         6d:d3:aa:dd:6d:d1:7e:c5:b1:f2:fa:75:48:8a:75:b9:6f:bd:
         32:a2:54:34:fa:12:96:db:9e:de:e6:5a:27:03:37:df:18:a3:
         cd:59:e4:37:8d:7c:3c:e4:c4:25:5f:58:5a:71:b8:36:e4:90:
         40:34:d1:80:82:77:9b:33:f5:f7:c4:a3:06:cc:6d:b9:8c:6f:
         08:4a:c7:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:27:51 2026 by rpki-client